导入pfx作为另一个用户 - 模仿

Question

我想伸出援手，看看是否有人有一些有关模仿/Runas CMD的提示。我正在处理一个导出的脚本，然后将.pfx证书从管理文件中导入到用户配置文件中。现在，除了导入部分，我的所有工作都可以。

如下所示，我仅显示导入部分。 $ x和$ y变量是在脚本中通过用户输入定义的，这还可以。

一切都可以使用，直到导入pfxcertificate cmdlet和ScriptBlock为止。事实证明，运行该脚本块作为另一个用途很难。如果有人对如何构建ScriptBlock CMD有任何建议，以便它将运行用户，那就太好了！

不幸的是，我也有一个错误的日志（未显示），它没有遇到任何错误，因为我相信它是在拉动本地机器证书而不是我指定的证书 - 因此没有真正的错误消息。

    <#Cache credentials in IE and Import new or existing cert as client#>
  function importcert
 {
     certpath = "C:\Temp\$x.pfx"
     $password = $y | ConvertTo-SecureString -AsPlainText -Force
     
<#Enter your credentials#>
     Credentials = Get-Credential -Credential corp\$x
     
<#Export to Secure XML#>
     $Credentials | Export-Clixml -path 'C:\Temp\creds.xml'
     
 <#Import credentials and run application using those credentials#>
     Set-Location C:\
     $creds = Import-Clixml -Path 'C:\Temp\creds.xml'
     $ie = Start-Process -FilePath 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' -Credential $creds
     $ie
     Start-Sleep -Seconds 30
     
     
 <#Imports the certificate as the client#>
     Start-Job -ScriptBlock { Import-PfxCertificate -FilePath $certpath -Exportable -CertStoreLocation Cert:\CurrentUser\My -Password $password } -Credential $creds
     
     
 <#Search For Client Credential and if path is false, the credential file was removed successfully.#>
     $clientXML = Test-Path -Path "C:\Temp\creds.xml"
     Remove-Item -Path "C:\Temp\creds.xml"
     if (-not ($clientXML))
     {
         Write-Output "Credential XML was removed"
     }
     
 }
 importcert

Answer 1

看来您所缺少的只是一些开始工作的争论。我刚刚在本地测试了此问题，并为其他用户tomservo：安装mycert.pfx：

<#Cache credentials in IE and Import new or existing cert as client#>
$Certpath = Get-Item "C:\Projects\Sandbox\mycert.pfx"
$Password = '{Password}' | ConvertTo-SecureString -AsPlainText -Force
    
<#Enter your credentials#>
$Credentials = Get-Credential -UserName TomServo
    
<#Export to Secure XML#>
$Credentials | Export-Clixml -path 'C:\Projects\Sandbox\creds.xml'
    
<#Import credentials and run application using those credentials#>
Set-Location C:\
$Creds = Import-Clixml -Path 'C:\Projects\Sandbox\creds.xml'
$Ie = Start-Process -FilePath 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' -Credential $Creds
$Ie
Start-Sleep -Seconds 30
    
<#Imports the certificate as the client#>
Start-Job -ScriptBlock { 
    param($certpath, $Password)
    Import-PfxCertificate -FilePath $Certpath -Exportable -CertStoreLocation Cert:\CurrentUser\My -Password $Password 
} -Credential $Creds -ArgumentList $Certpath, $Password
    
<#Search For Client Credential and if path is false, the credential file was removed successfully.#>
$ClientXML = Test-Path -Path "C:\Projects\Sandbox\creds.xml"
Remove-Item -Path "C:\Projects\Sandbox\creds.xml"
if (-not ($ClientXML))
{
    Write-Output "Credential XML was removed"
}